{ "note": "Live mTLS probe of https://agents.cequs.com, run on cequs.com every 15 minutes (security/mtls-probe/probe.py). Signed answers are the gateway's (Ed25519; key at /agent-gateway/status). PROPOSED ARCHITECTURE, NOT PRODUCTION QUALITY.", "checkedAt": "2026-10-28T12:45:39Z", "intervalMinutes": 15, "target": "agents.cequs.com:443", "gatewayKeyId": "6d6556b9206855801a59b54f9bd05dd09f28ec54149a617d1b414666da068335", "probeAgent": "wimse://cequs.com/agents/mtls-probe-001", "certificates": { "registered": "2026-11-26T16:52:15Z", "unregistered": "2026-11-26T16:49:21Z" }, "passed": 5, "total": 5, "tests": [ { "name": "Missing client certificate", "expected": "Apache refuses the TLS handshake", "status": "passed", "observed": "refused in the TLS handshake (SSLError: TLSV13_ALERT_CERTIFICATE_REQUIRED)", "checkedAt": "2026-10-28T12:45:39Z" }, { "name": "Certificate from an unknown CA", "expected": "Apache refuses the TLS handshake: not issued by the agent CA", "status": "passed", "observed": "refused in the TLS handshake (SSLError: TLSV1_ALERT_UNKNOWN_CA)", "checkedAt": "2026-10-28T12:45:39Z" }, { "name": "Trusted but unregistered certificate", "expected": "Chain accepted; the gateway finds no agent bound to it and denies", "status": "passed", "answer": { "endpoint": "/probe", "time": "2026-10-28T12:45:39Z", "certificateFingerprint": "C85DF033887FF373A0F3DBEE679BDC7C40521099DA51F38EE9B235A5D232E621", "certificateNotAfter": "2026-11-26T16:49:21Z", "requestedScope": "cequs.mtls.probe", "agentDn": null, "agentIdentifier": null, "grantDn": null, "decision": "deny", "reason": "no registered agent is bound to this certificate", "proof": { "algorithm": "Ed25519", "keyId": "6d6556b9206855801a59b54f9bd05dd09f28ec54149a617d1b414666da068335", "signature": "ovsj2a1Ivs/1+pC6/D6bO0TRZjpbmHbeLOGI1mkh0Qn4dROGHFhCnsORwm/OVDrJSLA31g3Zr8r0l567xBwNAg==" } }, "observed": "HTTP 403 DENY: no registered agent is bound to this certificate", "checkedAt": "2026-10-28T12:45:39Z" }, { "name": "Registered certificate + ungranted scope", "expected": "Bound to the probe agent; maple.lot.grade.propose is denied", "status": "passed", "answer": { "endpoint": "/probe", "time": "2026-10-28T12:45:39Z", "certificateFingerprint": "46E74778D6D73C5DC8133944D95DA2DF8E9F8930F1996F9EA5AEB8CFBAFFC199", "certificateNotAfter": "2026-11-26T16:52:15Z", "requestedScope": "maple.lot.grade.propose", "agentDn": "cn=mtls-probe-agent,ou=AI-Agents,o=Cequs,c=US", "agentIdentifier": "wimse://cequs.com/agents/mtls-probe-001", "grantDn": null, "sponsor": { "claim": "example-maple-farm-sponsor", "accountable": "cn=Example Maple Farm Sponsor,ou=People,st=Vermont,c=US", "attestations": [ { "program": "Vermont state digital identity", "status": "simulated", "verifiedAt": "20261008024933Z" } ] }, "decision": "deny", "reason": "no grant carries maple.lot.grade.propose within its validity window", "proof": { "algorithm": "Ed25519", "keyId": "6d6556b9206855801a59b54f9bd05dd09f28ec54149a617d1b414666da068335", "signature": "aUU4A+q4Xl34CSFb0QrodaI3Iu1pMwcDBh511RQlvrUcjgEbUpmmtES+ZcsJtKu75QKFaVI7Y8f5hahhPCcRCg==" } }, "observed": "HTTP 403 DENY: no grant carries maple.lot.grade.propose within its validity window", "checkedAt": "2026-10-28T12:45:39Z" }, { "name": "Registered certificate + active grant", "expected": "Bound to the probe agent; cequs.mtls.probe is allowed", "status": "passed", "answer": { "endpoint": "/probe", "time": "2026-10-28T12:45:39Z", "certificateFingerprint": "46E74778D6D73C5DC8133944D95DA2DF8E9F8930F1996F9EA5AEB8CFBAFFC199", "certificateNotAfter": "2026-11-26T16:52:15Z", "requestedScope": "cequs.mtls.probe", "agentDn": "cn=mtls-probe-agent,ou=AI-Agents,o=Cequs,c=US", "agentIdentifier": "wimse://cequs.com/agents/mtls-probe-001", "grantDn": "cn=grant-mtls-probe,ou=AI-Agents,o=Cequs,c=US", "sponsor": { "claim": "example-maple-farm-sponsor", "accountable": "cn=Example Maple Farm Sponsor,ou=People,st=Vermont,c=US", "attestations": [ { "program": "Vermont state digital identity", "status": "simulated", "verifiedAt": "20261008024933Z" } ] }, "grantEnd": "20261231235959Z", "decision": "allow", "reason": "certificate bound to an active agent holding a current grant under c=US for cequs.mtls.probe", "proof": { "algorithm": "Ed25519", "keyId": "6d6556b9206855801a59b54f9bd05dd09f28ec54149a617d1b414666da068335", "signature": "j+b7GF6WGkghxyLgPLRGLV46ZlvQD92gSEo7JwchlmvtzjKZL6qNzVKRehC2+vX4rylewjHQjPaZ11+2J5wuDQ==" } }, "observed": "HTTP 200 ALLOW: certificate bound to an active agent holding a current grant under c=US for cequs.mtls.probe", "checkedAt": "2026-10-28T12:45:39Z" } ], "history": [ { "checkedAt": "2026-10-28T12:45:39Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T12:30:13Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T12:15:28Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T12:00:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T11:45:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T11:30:13Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T11:15:38Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T11:00:08Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T10:45:09Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T10:30:38Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T10:15:08Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T10:00:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T09:45:28Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T09:30:52Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T09:15:08Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T09:00:06Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T08:45:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T08:30:22Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T08:15:18Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T08:00:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T07:45:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T07:30:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T07:15:39Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T07:00:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T06:45:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T06:30:31Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T06:15:08Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T06:00:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T05:45:38Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T05:30:28Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T05:15:38Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T05:00:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T04:45:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T04:30:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T04:15:08Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T04:00:22Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T03:45:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T03:30:30Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T03:15:38Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T03:00:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T02:45:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T02:30:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T02:15:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T02:00:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T01:45:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T01:30:18Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T01:15:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T01:00:38Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T00:45:37Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T00:30:19Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T00:15:31Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T00:08:03Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-28T00:00:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T23:59:32Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T23:45:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T23:44:30Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T23:42:38Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T23:41:12Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T23:40:43Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T23:30:08Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T23:15:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T23:00:34Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T22:57:41Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T22:45:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T22:30:18Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T22:15:33Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T22:00:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T21:45:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T21:30:19Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T21:15:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T21:00:32Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T20:45:31Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T20:30:08Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T20:15:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T20:00:31Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T19:45:30Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T19:30:30Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T19:15:30Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T19:00:28Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T18:45:18Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T18:30:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T18:15:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T18:00:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T17:45:19Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T17:30:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T17:15:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T17:00:20Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T16:55:15Z", "passed": 5, "total": 5 }, { "checkedAt": "2026-10-27T16:52:57Z", "passed": 3, "total": 5 } ] }